Static task
static1
Behavioral task
behavioral1
Sample
13754433d3ede403430e4eafdc1a45567639716e9ee8763bf3a6b391ae07ada7.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
13754433d3ede403430e4eafdc1a45567639716e9ee8763bf3a6b391ae07ada7.exe
Resource
win10v2004-20241007-en
General
-
Target
13754433d3ede403430e4eafdc1a45567639716e9ee8763bf3a6b391ae07ada7
-
Size
2.8MB
-
MD5
d8c548207ef7aaaeae2d83dc53ea84fc
-
SHA1
1b785c08d48a8ad9c70fc30411759ab730d77512
-
SHA256
13754433d3ede403430e4eafdc1a45567639716e9ee8763bf3a6b391ae07ada7
-
SHA512
7d934aa40716329e9cc09574cf56913819b6b3d316dde4cae536856378722940b033b61973d33d5bd23da9ff337f70ca5a704ebea56fe114aec9bde7fb6a1ed7
-
SSDEEP
49152:7nP6JoJ67eQD9rSl5thuDZzjz4YVwNehjzEWZ84+dFTN1SmxANwJMigXAJ:bqnQudzjz4Y1hXEWG4QMrAJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 13754433d3ede403430e4eafdc1a45567639716e9ee8763bf3a6b391ae07ada7
Files
-
13754433d3ede403430e4eafdc1a45567639716e9ee8763bf3a6b391ae07ada7.exe windows:5 windows x86 arch:x86
92123d4a3b04ca0b3359b64c690e6528
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
psapi
GetProcessImageFileNameA
GetModuleFileNameExA
EnumProcessModules
EnumProcesses
comctl32
PropertySheetA
ord6
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy
ord17
winmm
PlaySoundA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
wininet
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA
iphlpapi
GetAdaptersInfo
kernel32
SetFilePointer
MapViewOfFile
UnmapViewOfFile
SetEndOfFile
HeapAlloc
SystemTimeToFileTime
QueryPerformanceCounter
HeapFree
WaitForSingleObject
InterlockedCompareExchange
UnlockFile
LockFile
OutputDebugStringW
GetTickCount
UnlockFileEx
GetProcessHeap
GetSystemTimeAsFileTime
FormatMessageA
InitializeCriticalSection
WideCharToMultiByte
LoadLibraryW
Sleep
FormatMessageW
GetVersionExW
HeapDestroy
LeaveCriticalSection
GetFileAttributesA
HeapCreate
HeapValidate
GetFileAttributesW
ReadFile
CreateFileW
MultiByteToWideChar
FlushFileBuffers
GetTempPathW
GetLastError
HeapSize
LockFileEx
EnterCriticalSection
GetDiskFreeSpaceW
CreateFileMappingA
CreateFileMappingW
GetDiskFreeSpaceA
GetSystemInfo
GetFileAttributesExW
DeleteCriticalSection
OutputDebugStringA
GetVersionExA
CloseHandle
DeleteFileW
GetCurrentProcessId
GetTempPathA
LocalFree
GetSystemTime
AreFileApisANSI
DeleteFileA
GetLocalTime
lstrcpyA
OpenProcess
MoveFileExA
GetFileSize
FileTimeToSystemTime
GetSystemDirectoryA
GetTimeZoneInformation
GetEnvironmentVariableA
GetShortPathNameA
CreateDirectoryA
RemoveDirectoryA
SetFileAttributesA
WritePrivateProfileStringA
GetModuleFileNameA
GetFileTime
FileTimeToLocalFileTime
GetExitCodeProcess
TerminateProcess
MoveFileA
GetProfileStringA
lstrcmpA
HeapCompact
lstrcatA
GetPrivateProfileStringA
CreateProcessA
GetModuleHandleA
ExpandEnvironmentStringsA
WriteProfileStringA
SearchPathA
lstrcmpiA
CompareStringA
IsProcessorFeaturePresent
RtlUnwind
LCMapStringW
GetConsoleMode
GetConsoleCP
GetModuleFileNameW
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
EncodePointer
CreateFileA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetDateFormatA
GetTimeFormatA
CreateThread
GetCurrentThreadId
ExitThread
DecodePointer
ExitProcess
GetModuleHandleW
HeapReAlloc
GetFullPathNameA
GetFullPathNameW
LoadLibraryA
GetProcAddress
GetCurrentProcess
FreeLibrary
_lread
FindNextFileA
FindClose
GlobalFree
CopyFileA
FindFirstFileA
GlobalUnlock
GlobalAlloc
WriteFile
GetWindowsDirectoryA
_lclose
GlobalLock
SetErrorMode
OpenFile
WinExec
lstrlenA
GlobalMemoryStatus
CreateMutexW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeW
SetStdHandle
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
QueryDosDeviceA
user32
GetWindowLongA
SystemParametersInfoA
GetMessageA
PostQuitMessage
SetWindowLongA
TranslateMessage
CreateWindowExA
DefWindowProcA
DispatchMessageA
RegisterClassA
DestroyWindow
ChildWindowFromPoint
GetClientRect
IsWindowEnabled
GetPropA
DrawTextA
GetWindowThreadProcessId
LoadBitmapA
FindWindowA
GetDlgItem
SendMessageA
LoadCursorA
wsprintfA
SetCursor
SetDlgItemTextA
GetDlgItemInt
SetTimer
GetWindowRect
MapDialogRect
SendDlgItemMessageA
KillTimer
GetParent
LoadIconA
RemovePropA
FindWindowExA
SetFocus
GetDC
SetPropA
TrackPopupMenuEx
MessageBoxA
BringWindowToTop
ReleaseDC
GetDesktopWindow
SetWindowPos
GetCursorPos
CreatePopupMenu
AppendMenuA
PostMessageA
SetMenuDefaultItem
DeferWindowPos
LoadImageA
UpdateWindow
EnableWindow
CallWindowProcA
GetDlgItemTextA
DestroyIcon
EndDeferWindowPos
GetSystemMetrics
InvalidateRect
GetClassNameA
SetForegroundWindow
LoadStringA
GetWindowTextA
ShowWindow
IsWindow
CharUpperBuffA
EndDialog
SetWindowTextA
DialogBoxParamA
MessageBoxExA
BeginDeferWindowPos
gdi32
SetBkMode
SelectObject
CreateFontA
GetStockObject
GetDeviceCaps
SetTextColor
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegOpenKeyA
CryptCreateHash
RegQueryValueA
CryptAcquireContextA
CryptReleaseContext
RegCloseKey
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
GetServiceKeyNameA
GetServiceDisplayNameA
QueryServiceStatusEx
CryptDestroyHash
CryptHashData
RegEnumKeyA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegDeleteValueA
GetUserNameA
OpenServiceA
CloseServiceHandle
StartServiceA
QueryServiceStatus
OpenSCManagerA
ControlService
CryptGetHashParam
shell32
ExtractIconA
SHGetFileInfoA
SHFileOperationA
ShellExecuteExA
ShellExecuteA
SHGetSpecialFolderPathA
SHGetFolderPathA
ole32
CoInitializeSecurity
CoInitializeEx
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
VariantClear
Sections
.text Size: 891KB - Virtual size: 892KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ